[ubuntu/yakkety-proposed] wget 1.17.1-1ubuntu2 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Tue Jun 14 08:34:15 UTC 2016


wget (1.17.1-1ubuntu2) yakkety; urgency=medium

  * SECURITY UPDATE: http to ftp redirect spoofed filenames
    - debian/patches/CVE-2016-4971.patch: understand --trust-server-names
      on a HTTP->FTP redirect in src/ftp.*, src/retr.c.
    - CVE-2016-4971

Date: Tue, 14 Jun 2016 10:36:24 +0300
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/wget/1.17.1-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 14 Jun 2016 10:36:24 +0300
Source: wget
Binary: wget wget-udeb
Architecture: source
Version: 1.17.1-1ubuntu2
Distribution: yakkety
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 wget       - retrieves files from the web
 wget-udeb  - retrieves files from the web (udeb)
Changes:
 wget (1.17.1-1ubuntu2) yakkety; urgency=medium
 .
   * SECURITY UPDATE: http to ftp redirect spoofed filenames
     - debian/patches/CVE-2016-4971.patch: understand --trust-server-names
       on a HTTP->FTP redirect in src/ftp.*, src/retr.c.
     - CVE-2016-4971
Checksums-Sha1:
 46459e3a562a6c498fd3dc41c8923fda0bbcab5a 1929 wget_1.17.1-1ubuntu2.dsc
 4c696402de2e2b182a4562154eac07f8cc34778c 24752 wget_1.17.1-1ubuntu2.debian.tar.xz
Checksums-Sha256:
 64c772d7d3adaf602091822b4e5d2f431caccd19ae03b31516712c0ce3e850c0 1929 wget_1.17.1-1ubuntu2.dsc
 835ed98073ca4075081e99bbc3fb8779c09981188a60fc4c1868a62c7e77f3ef 24752 wget_1.17.1-1ubuntu2.debian.tar.xz
Files:
 0823d4b0d912cd085988098445522ccd 1929 web important wget_1.17.1-1ubuntu2.dsc
 6eede3479ea4abebf47c4bc9aafc962c 24752 web important wget_1.17.1-1ubuntu2.debian.tar.xz
Original-Maintainer: Noël Köthe <noel at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=hWg1
-----END PGP SIGNATURE-----


More information about the Yakkety-changes mailing list